Confirm the source
Compare the repository, publisher, and installation command before continuing.
✓
Third-party audit
PassedGen Agent Trust Hub
why · michael-denyer/pstack-claude
Provider summary
The skill 'why' is an investigative tool that queries multiple data sources (source control, issue trackers, documentation, etc.) to understand code rationale. Its primary security risk is Indirect Prompt Injection, as it ingests and processes untrusted data from external sources like GitHub PRs, Slack messages, and tickets which could contain malicious instructions designed to influence the agent's behavior.
The provider classified the analyzed snapshot as NONE risk. This result applies to the content available at audit time.
- Provider
- Gen Agent Trust Hub
- Normalized result
- pass
- Risk level
- NONE
- Audited
- Oct 13, 2026
How to use this signal
Read the content
Review SKILL.md, scripts, and allowed tools. OpenAI Suite never executes them during indexing.
Limit permissions
Use the narrowest possible scope and avoid broad credentials for third-party skills.